Infineon Technologies – OPTIGA™ TPM SLB 9673 and SLB 9672 – PTM | DigiKey

Welcome to this Product Training Module for Infineon Technologies OPTIGA™ TPM SLB 9673 and SLB 9672. These ready-to-use and proven hardware security solutions are designed to be upgradeable for the quantum computing age.

While quantum computing is promised to offer many benefits, it is also expected to introduce new threats by rendering many existing security schemes ineffective. With cryptographically relevant quantum computers projected to become available around the year 2035, preparations to mitigate these future threats need to be made now for devices expected to remain in service as the post quantum computing era, or PQC, arrives. Infineon’s OPTIGA™ TPM SLB 9673 and SLB 9672 implement the latest TCG TPM 2.0 standard and are TCG, CC, and FIPS certified.

They can handle hash-based XMSS signatures for firmware updates, which are ideal for PQC because they utilize simple, robust hash functions, giving strong, well-understood resistance against quantum attacks, but they require careful state management and larger signatures.

They also incorporate additional resilience features to protect against physical and logical attacks and guard against firmware corruption.

They also support modern crypto algorithms such as RSA-4096, SHA2-384, and ECC NIST P384, in addition to ECDSA and legacy crypto algorithms.

The security controllers support firmware updates, have 51 kilobytes of secured nonvolatile memory, and cryptographic operations are performed 2 to 4 times faster versus previous OPTIGA™ TPM security controllers.

OPTIGA™ TPM SLB9673 features an I-squared-C interface while OPTIGA™ TPM SLB 9672 has a SPI interface, but they are otherwise equal. They feature a thin 5 by 5 millimeter 32 pin UQFN package, with three pins for GPIOs. They can operate from negative 40 to positive 85 degrees Celsius, with extended temperature variants operating at up to 105 degrees Celsius.

One of the key considerations for PQC is the firmware update process, as the strength of security architectures is limited by their weakest link. For Infineon’s OPTIGA™ TPM SLB 9673 and OPTIGA™ TPM SLB 9672, the firmware update mechanism is PQC-protected using XMSS signatures. This supports secured firmware updates, enabling upgrades to address new functions or potential threats.

Infineon offers Raspberry Pi HAT evaluation boards for both the OPTIGA™ TPM SLB 9673 and SLB 9672 and the OPTIGA™ TPM 2.0 Explorer software. Together, these boards and software provide a quick and easy way to initialize the controller, see commands and responses as they’re executed, view all properties, and otherwise manage the device.

These OPTIGA™ TPM 2.0 controllers provide robust identification and authentication for servers and datacenter platforms, business PCs and printers, network infrastructure devices, embedded applications, industrial machines, and IoT devices.